Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/1/34352e3233302e3135362e302f32322d3234203d3e20323637313634.roa
File:                     34352e3233302e3135362e302f32322d3234203d3e20323637313634.roa (raw, json)
Hash identifier:          D3OVMyq1T+FxTAb7CWsq8R5gzRd13dI7PwKWD0hkgfA=
Subject key identifier:   60:36:86:D3:2E:32:BD:08:F9:95:E2:34:96:2E:CD:D4:C8:AD:B7:2C
Certificate issuer:       /CN=81DD59DA77587B1BD0A14E971E442A926C1CFBAB
Certificate serial:       5E2CE85C74B64945D417166D9E2A4417F7A63CA4
Authority key identifier: 81:DD:59:DA:77:58:7B:1B:D0:A1:4E:97:1E:44:2A:92:6C:1C:FB:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81DD59DA77587B1BD0A14E971E442A926C1CFBAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/1/34352e3233302e3135362e302f32322d3234203d3e20323637313634.roa
Signing time:             Thu 04 Apr 2024 14:52:56 +0000
ROA not before:           Thu 04 Apr 2024 14:47:56 +0000
ROA not after:            Thu 03 Apr 2025 14:52:56 +0000
asID:                     267164
IP address blocks:        45.230.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/1/81DD59DA77587B1BD0A14E971E442A926C1CFBAB.crl
                          rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/1/81DD59DA77587B1BD0A14E971E442A926C1CFBAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81DD59DA77587B1BD0A14E971E442A926C1CFBAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2c:e8:5c:74:b6:49:45:d4:17:16:6d:9e:2a:44:17:f7:a6:3c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DD59DA77587B1BD0A14E971E442A926C1CFBAB
        Validity
            Not Before: Apr  4 14:47:56 2024 GMT
            Not After : Apr  3 14:52:56 2025 GMT
        Subject: CN=603686D32E32BD08F995E234962ECDD4C8ADB72C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:fe:a1:0d:e6:99:13:c5:54:52:01:ca:4f:26:
                    cc:37:63:08:60:22:05:22:28:09:8d:0a:92:76:d4:
                    c2:09:0c:f8:81:fc:04:68:73:53:07:65:99:89:8b:
                    65:01:97:d3:b5:b3:9b:72:9a:da:53:ca:74:72:f9:
                    0b:c6:01:c6:1f:6d:43:a4:52:ff:e8:e2:1d:cc:e3:
                    fb:45:d1:40:c3:7c:4a:8c:08:58:34:11:0f:b6:b1:
                    9b:fe:81:a8:69:d0:9f:03:12:5e:f0:50:5a:f3:41:
                    0a:98:ce:8c:2d:e8:4c:92:8e:65:a6:41:b7:ef:2a:
                    52:03:ea:ac:81:8a:cf:7e:a9:ec:a2:38:44:e5:a8:
                    29:25:fe:cf:c4:e0:ee:56:d5:ed:e1:9e:2b:49:73:
                    06:1b:d3:b0:d1:f5:57:b8:79:d8:70:2c:a1:ec:3c:
                    b1:5a:a1:41:9f:26:fb:8d:24:bf:d8:c7:0a:18:0e:
                    9a:1f:e9:e4:31:d5:45:8b:db:43:ea:83:3d:f8:f5:
                    0c:11:65:77:bf:61:82:06:81:ae:97:2b:61:21:9e:
                    48:08:05:12:10:42:06:78:8c:b9:e9:f4:84:cf:87:
                    c7:cb:d3:f0:52:60:4d:57:2e:a5:e3:88:54:55:6a:
                    3a:66:e1:88:ec:6a:fd:50:a2:f6:85:36:bf:f0:fc:
                    cb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:36:86:D3:2E:32:BD:08:F9:95:E2:34:96:2E:CD:D4:C8:AD:B7:2C
            X509v3 Authority Key Identifier:
                keyid:81:DD:59:DA:77:58:7B:1B:D0:A1:4E:97:1E:44:2A:92:6C:1C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/1/81DD59DA77587B1BD0A14E971E442A926C1CFBAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81DD59DA77587B1BD0A14E971E442A926C1CFBAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/1/34352e3233302e3135362e302f32322d3234203d3e20323637313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:26:86:22:15:5a:06:29:05:30:69:55:f7:46:55:8d:e6:78:
         8a:02:4b:84:52:91:af:17:f2:45:58:5b:63:4b:9e:71:05:c9:
         41:f0:53:0b:4e:bd:af:5f:89:27:a1:d3:e6:28:36:a6:c3:82:
         50:50:60:11:9b:31:3d:47:51:88:82:0f:e4:4b:71:ec:72:f2:
         cf:04:db:d8:e0:cc:3e:a1:cc:43:a9:14:b1:10:06:ea:c9:78:
         30:57:22:63:09:ca:9a:a2:f9:0f:35:7d:52:32:ba:82:53:94:
         b4:aa:dd:03:31:7e:fe:25:22:78:fd:15:53:b9:a0:d1:38:79:
         4d:bd:a0:4b:1b:ce:00:33:ee:d9:ca:ba:99:13:1a:6f:aa:2f:
         71:53:57:26:92:c6:dd:02:ad:7c:60:22:3b:5e:1a:39:1f:90:
         18:3e:27:32:73:1b:f7:90:d3:e1:3e:b7:ad:9b:ee:50:82:bd:
         e8:ee:29:b7:83:a9:fd:83:34:96:c7:52:fe:ae:92:da:bd:87:
         0a:96:ad:d1:35:94:ea:69:ed:45:15:b9:e2:79:67:bb:9d:bf:
         be:8d:eb:36:bf:b2:99:1d:80:d3:a2:03:d6:4b:c2:fd:76:49:
         03:19:ca:82:11:2b:89:00:3d:bc:2a:17:b0:58:b7:74:79:4b:
         32:73:c1:3c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXizoXHS2SUXUFxZtnipEF/emPKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODFERDU5REE3NzU4N0IxQkQwQTE0RTk3MUU0NDJBOTI2
QzFDRkJBQjAeFw0yNDA0MDQxNDQ3NTZaFw0yNTA0MDMxNDUyNTZaMDMxMTAvBgNV
BAMTKDYwMzY4NkQzMkUzMkJEMDhGOTk1RTIzNDk2MkVDREQ0QzhBREI3MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4/qEN5pkTxVRSAcpPJsw3Ywhg
IgUiKAmNCpJ21MIJDPiB/ARoc1MHZZmJi2UBl9O1s5tymtpTynRy+QvGAcYfbUOk
Uv/o4h3M4/tF0UDDfEqMCFg0EQ+2sZv+gahp0J8DEl7wUFrzQQqYzowt6EySjmWm
QbfvKlID6qyBis9+qeyiOETlqCkl/s/E4O5W1e3hnitJcwYb07DR9Ve4edhwLKHs
PLFaoUGfJvuNJL/YxwoYDpof6eQx1UWL20Pqgz349QwRZXe/YYIGga6XK2EhnkgI
BRIQQgZ4jLnp9ITPh8fL0/BSYE1XLqXjiFRVajpm4Yjsav1QovaFNr/w/MvJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYDaG0y4yvQj5leI0li7N1MittywwHwYDVR0j
BBgwFoAUgd1Z2ndYexvQoU6XHkQqkmwc+6swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlh3M3JjNTliU2NaZ3l2c29SR1RKOW5oeXhYSlk3WUJ3VjZRY0tiR05Q
RFovMS84MURENTlEQTc3NTg3QjFCRDBBMTRFOTcxRTQ0MkE5MjZDMUNGQkFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxREQ1OURBNzc1ODdCMUJE
MEExNEU5NzFFNDQyQTkyNkMxQ0ZCQUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZYdzNyYzU5YlNjWmd5dnNvUkdUSjluaHl4WEpZN1lCd1Y2UWNLYkdOUERaLzEv
MzQzNTJlMzIzMzMwMmUzMTM1MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczMTM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt5pwwDQYJKoZIhvcNAQELBQADggEBACEmhiIV
WgYpBTBpVfdGVY3meIoCS4RSka8X8kVYW2NLnnEFyUHwUwtOva9fiSeh0+YoNqbD
glBQYBGbMT1HUYiCD+RLcexy8s8E29jgzD6hzEOpFLEQBurJeDBXImMJypqi+Q81
fVIyuoJTlLSq3QMxfv4lInj9FVO5oNE4eU29oEsbzgAz7tnKupkTGm+qL3FTVyaS
xt0CrXxgIjteGjkfkBg+JzJzG/eQ0+E+t62b7lCCvejuKbeDqf2DNJbHUv6uktq9
hwqWrdE1lOpp7UUVueJ5Z7udv76N6za/spkdgNOiA9ZLwv12SQMZyoIRK4kAPbwq
F7BYt3R5SzJzwTw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:18 2024 by rpki-client on console-ams.rpki-client.org